Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Mirai Botnet Domain Observed rev 2 2019-08-28
snort ET TROJAN Ransomware Locky .onion Payment Domain rev 2 2019-08-28
snort ET TROJAN CDT Credphish/Netwire Campaign DNS Lookup rev 2 2019-08-28
snort ET TROJAN ABUSE.CH Zloader CnC Domain Detected rev 2 2019-08-28
snort ET TROJAN LYCEUM MSIL/DanBot CnC Checkin rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup check-fix.com rev 3 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 7 rev 2 2019-08-28
snort ET WEB_CLIENT Possible Fake AV Phone Scam Long Domain Mar 30 M2 rev 4 2019-08-28
snort ET TROJAN APT32 Komprogo DNS Lookup rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup rev 2 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 19 rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup updatepc.org rev 3 2019-08-28
snort ET TROJAN Possible WannaCry DNS Lookup 2 rev 4 2019-08-28
snort ET TROJAN Ransomware CrypMIC Payment Onion Domain rev 3 2019-08-28
snort ET TROJAN Ponmocup Post Infection DNS Lookup fasternation rev 2 2019-08-28
snort ET TROJAN Ransomware Locky .onion Payment Domain rev 2 2019-08-28
snort ET POLICY DNS Query to a *.neokred domain - Likely Hostile rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup windows-updater.com rev 3 2019-08-28
snort ET TROJAN ShellCrew.APT StreamEx DNS Lookup 13 rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 17 rev 2 2019-08-28
snort ET TROJAN XCodeGhost DNS Lookup rev 2 2019-08-28
snort ET POLICY Android Adups Firmware DNS Query rev 2 2019-08-28
snort ET WEB_SERVER DNS Query for Suspicious 9507c4e8.com Domain - Anuna Checkin - Compromised PHP Site rev 3 2019-08-28
snort ET TROJAN Ponmocup Post Infection DNS Lookup messagewild rev 2 2019-08-28
snort ET TROJAN APT32 Komprogo DNS Lookup rev 2 2019-08-28
snort ET TROJAN Sofacy DNS Lookup testsnetcontrol.com rev 3 2019-08-28
snort ET CURRENT_EVENTS BankAustria Phishing Domain Nov 03 2017 rev 4 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 25 rev 2 2019-08-28
snort ET TROJAN LYCEUM CnC Domain Observed in DNS Query rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 47 rev 2 2019-08-28
snort ET TROJAN OSX/Mughthesec/SafeFinder/OperatorMac Rogue Search Engine DNS Query Observed rev 3 2019-08-28
snort ET TROJAN Mirai Botnet Domain Observed rev 2 2019-08-28
snort ET TROJAN Scarlet Mimic DNS Lookup 46 rev 2 2019-08-28
snort ET TROJAN Critroni Variant .onion Proxy Domain rev 2 2019-08-28
snort ET TROJAN CryptON/Nemesis/X3M Ransomware Onion Domain rev 3 2019-08-28
snort ET TROJAN XCodeGhost DNS Lookup rev 2 2019-08-28
snort ET WEB_CLIENT Fake AV Phone Scam Domain M3 Mar 3 rev 3 2019-08-28
snort ET TROJAN DNS Query for Known Chewbacca CnC Server rev 3 2019-08-28
snort ET TROJAN Sofacy DNS Lookup adobeincorp.com rev 3 2019-08-28
snort ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 8 rev 2 2019-08-28